Options Statusconnectdisconnect, Connect | Digi 90000566_H instruction

vpn vpn

Devices	This command is supported in Digi Cellular Family products only, except
supported	Digi Connect WAN.
Purpose	Manages and displays the status of a Virtual Private Network (VPN) tunnel.
Required	For Digi Connect products with two or more users, permissions must be set
permissions	to “set permissions vpn=execute” to use this command. See
	"set permissions" on page 157 for details on setting user permissions for
	commands.
Syntax	vpn [statusconnectdisconnect]
	[index=1-2)]
	[name=tunnel	name]
Options	statusconnectdisconnect
	Specifies the action performed by the command. Note that a data
	connection must be attempted before the VPN tunnel will actually be
	brought up.
	status
	Display the status of the VPN tunnel.
	connect
	Enable the VPN tunnel.
	disconnect
	Disconnect the VPN tunnel.
	index=1-2
	Identifies the VPN tunnel.
	name=tunnel name
	The name of the tunnel.
Example	Display VPN tunnel status
	#> vpn status
	VPN Tunnel #1 Status :
	name	: Tunnel 1
	mode	: isakmp
	status	: down
	remote address: : 65.214.122.53
	mobile address: : not connected
	VPN Tunnel #2 Status :
	name	: Tunnel 2
	mode	: disabled

256	Chapter 2 Command Descriptions

Image 256

Digi 90000566_H manual Options Statusconnectdisconnect, Connect, Disconnect

Contents

Digi Connect Family Page Chapter Command Descriptions Chapter Introduction Contents Who 258 Modem Emulation CommandsIndex 271 Contents T r o d u c t i o n Chapter Quick Reference for Configuring Features Quick Reference for Configuring FeaturesFeature/Task Commands Guide Feature/Task Commands Configure an IP Address Access the Command LineAccess the Command Line Basic Command Information Entering Special Characters in String Values Escape Processed as SequenceEscape Sequences for Special Characters Length Limitations on String Values User Models and User Permissions in Digi Connect Products Identifying the User Model for Your Digi Connect ProductOne-user Model Two-user Model Login Suppression Feature Increasing Security for Digi Device Users User Models and User Permissions in Digi Connect Products Verifying Device Support for Commands Verifying Device Support for Commands To=serveripaddressfilename From=serveripaddressfilename Host ip address BootLoad file Examples See also Close Session Type Default Escape KeysConnection number Serial port Dhcpserver Ip address Display Dhcp server status Assigned active Assigned expiredReserved active Reserved inactive Offered pre-lease ReleasedUnavailable Address Set dhcpserver on Display Arp Options AccesscontrolBuffers Device DdnsGpio Memory Switches SerialSockets Spd Display device information Display Virtual Private Network VPN status information Output StateIp address Primary dns addr Reset status Last reset reason No serviceAdministrative Non-administrative Lcp echo requests Session successesSession failures Session consecutive failures Total link down requests Total bypasses Display buffers Tail=numberTftp=serverfilename Server Set buffer on Display port buffering information on the screenOutput buffering information to a Tftp server Output multi-port buffering information to a Tftp server Exit Help and ? help and ? Displaying Online Help on Ethernet InfoIcmp Displays statistics from the wireless Ethernet wlan table Statistics, see Output onDisplays statistics from the TCP table Displays statistics from the UDP table Ethernet statistics Statistic DescriptionIcmp statistics IP statistics Serial statistics TCP statistics UDP statistics Wireless Wlan statistics Display Icmp statistics Range KillConnection id Binary=onoff OptionsCrmod=onoff Id=number NewpassName=string Ipaddress Count=0nInterval=milliseconds Size=bytes Provision Given you Enter phone numbers as numbers only with no dashesDisplay current provisioning parameters Manually provision the module for a SIP-only network Spc=service programming code MSL Nai=network access idMdn=mobile directory number Min=mobile ID number Ha=home address Priha=primary host agent IP addressSecha=secondary host agent IP address Hass=host agent shared secret Type=otasp Type=iotaOtaspnumber= Otasp number for example, *228 Tftp server ipfilename Program args Quit =serial port s=session Revert multiple settings Auth command. The revert auth command revert authenticationRevert Time Alarm Options allAuth Autoconnect port=range Login EkahauForwarding Host Service Pmodem port=rangePppoutbound port=range Profile port=range Vpn allglobaltunnelphase1phase2 Phase1Phase2 Wireless Options Esc User=user name -luser name Send Set accesscontrol Options Enabled=onoffOff Autoaddsubnets=onoff Subnets will be allowed to access this device server Netmask 255.255.255.0 to access this device serverSubnip1-32=ipaddress Subnmask1-32= mask Set alarm Configure alarms with general options applies to all alarmsConfigure alarms for a range set multiple alarms Devices supported Purpose Required permissions Syntax Configure alarms based on data pattern matching Configure alarms based on mobile signal strength GSMConfigure alarms based on signal strength Cdma Configure alarms based on mobile temperature State= onoff Mailserverip=ipaddressFrom=string Cwm=onoff Cc=string To=string Highpins=list of highpins Pins=list of pinsLowpins=list of lowpins Reminder=onoff Reminderinterval=secondsTriggerinterval=seconds Mode=match Celldata=byte count threshold Time=max time Mode=configchange Mode=mobiletempMode=1xevdounavail Mode=mobileunavail Error conditions triggering alarms Set alarm #1 mode to Gpio modeSet alarm #1 to designate which pins trigger alarm Enable alarm #1 Gpio input, Gpio output, or standard serial Set alarm Turn alarm #10 onSet snmp on Set autoconnect Service=rawrloginssltelnet RloginState=onoff Trigger=alwaysdatadcddsrstring Nodelay=onoff Description=stringIpaddress=ipaddress Ipport=ipport Network IP destination when data arrives on the serial port Set network onSet serial on Set tcpserial on Set bsc State=disabledenabled Serialmode=bisync3270bisync3275Baudrate=baud rateexternalclock Baud rate Codeset=asciiebcdic Textconversion=onoffPollingaddress=0x followed by 2 hex digits Selectionaddress=0x followed by 2 hex digits Rxtimeout=milliseconds Noresponsemessage=0x followed by up to 64 hex digits Poweronmessage=0x followed by up to 64 hex digitsTxretries option Port Options ClearSize On mode and the buffer size to 64 kilobytes Data will not be buffered and all data will be cleared fromBuffer Pause Update requests will be rejected Registered with that serviceFor a user to display Dynamic DNS settings set permissions Ddnsupdater=read Service=disableddyndnsorg DisabledAction=updatenowclearstatus Updatenow Ddpassword=password StandardhttpAlternatehttp Securehttp Nochg Dynamic DNS serviceDisplay on User interface’s Network Configuration settings Command. See dhcpserver onFor a user to display Dhcp server settings set permissions Set dhcpserver set dhcpserver Item=scope Action=setrevertSet Revert Offerdelay=0-5000 Startip=ip addressEndip=ip address Leasetime=timeinfinite Item=reservation Range=1-16allIp=ip address Clientid=client MAC address Range=1-4all Item=exclusionFirst address in the exclusion block Using the web UI Disable all reservations that were previously addedIP address, which is the purpose of a reservation Is, reservations override exclusions 102 Command Descriptions Dhcpserver on Web user interface, the online help for Network SettingsDhcp terminology and managing Dhcp server operation Wireless device Set ekahau set ekahauDigi Connect Wi-EM only Proprietary hardware components Server=hostnameip address Id=device idName=device name Enable Ekahau Client Set identifiers Set ethernet Options DuplexHalf Full Speed 100 Set forwarding Privileges Options ipforwarding=onoff Staticrouteindex=1-8Action=addchangedelete Add Net=destination ip address Mask=subnet maskGateway=ip address Metric=1-16 Routing information Settings under Network ConfigurationSet nat on Set gpio Devices supported PurposeOptions Range=1-n Mode=serialinputoutput Pin Number Default Serial Signal Signal Direction SignalsMessages or Snmp traps when Gpio pins change Default serial signal settings for Gpio pins Set group Options AddRemove Id=range Commandline=onoff Defaultaccess=nonecommandlinemenuCommandline Name= string Default Permissions Examples Device support Options Name=name Set ia Configure serial-port connected devices set ia serial Configure network-based masters set ia master Instead of a set ia command with no options Serial settings, which includeSerial= range Serial options Slavetimeout=10-99999 ms applies to slave only Chartimeout=3-99999 ms applies to master or slaveIdletimeout=0=disabled1-99000 seconds Table=1..8 applies to master only Priority=highmediumlow Medium Modbus options Modbusrtu Modbusascii Modbustcp Messagetimeout=100-99000 ms Chartimeout=3-99000 msMaster=range Type=tcpudp 126 Command Descriptions Table options Addroute=route indexMoveroute=fromrouteindex,torouteindex Route options Port=serial port Mapto=protocol address Settings for the Digi Connect WAN IA Configuration settings in the Web user interfaceRevert on page 61. The revert ia command options revert any Existing IA configuration settings Set login Options Suppress=onoff Quitkey=key Quitlabel=string Previouskey=keyPreviouslabel=string Presskeylabel=string Title=string subtitle=string Sortby=nonekeylabelKey Label Direction=horizontalvertical HorizontalVertical Item=1-32 Command=string Submenu=stringMenu displayed to the user upon selecting the menu item Contains spaces, enclose it in double quotes Set mgmtconnection Lkaupdateenabled=onoff Timedperiod=periodTimedoffset=immediateoneperiodrandomtime Immediate Clntreconntimeout=nonetimeout Retry timeout interval featureDisplay current connection settings Set values for the client connection Settings set permissions s-mgmtglobal=rw Set mgmtglobalSet permissions s-mgmtglobal=read Options Deviceid=hex string Tcpnodelayenabled=onoff Rcicompressionenabled=onoffTcpkeepalivesenabled=onoff Connidletimeout=nonetimeout value Revertdeviceid Set mgmtnetwork Options Networktype=modempppethernet802.11Modemppp 802.11 Proxylogin=string Proxypassword=stringConnectionmethod=autononemtmdhproxy Mdh Mtwaitcount=count Mdhrxkeepalive=timeMdhtxkeepalive=time Mdhwaitcount=count Protocol forwarding settings Settings set permissions s-router=rwSet nat set nat Supported are Prenabled1-4=onoff Poenabled1-64=onoffMaxentries=64-1024 Prnumber1-4=greesp Poproto1-64=tcpudp Pocount=1-64=number of ports in range, minimumPoexternal1-64=number of ports in range, minimum Pointernal1-64=number of ports in range, minimum Setting user permissions for commands Set networkNetwork level Where Ip address options Ip=device ip addressGateway=gateway ip Submask=device submask TCP keepalive options TCP retransmit options Arpttl=1-20 minutes ARP optionsGarp=30-3600 seconds Set passthrough Using Pinholes to Manage the Digi Cellular Family Device Remote Device Management and IP Pass-through Options State=enableddisabled Http=passterminateHttps=passterminate Telnet=passterminate Surelink=passterminate Connectware=passterminatePing=passterminate Set permissions On page 14 for more informationHelp Permission descriptions Set permissions Backup=noneexecute Boot=noneexecuteExecute Self Rlogin=noneexecute Accesscontrol=nonereadrwConnect=noneexecute Dhcpserver=noneexecute Alarm=nonereadrw Ddnsupdater=nonereadrwLogin=nonereadrw Autoconnect=noner-selfreadrw-selfw-self-rrw Service=nonereadrw Permissions=nonereadrwPmodem=noner-selfreadrw-selfw-self-rrw Ppp=nonereadrw User=nonereadrw Vpn=nonereadrwWlan=nonereadrw Status=nonereadrw Enables modem emulation Disables modem emulationConfigure modem emulation Display modem-emulation settings Enables Telnet processing Disables Telnet processingModem Emulation Commands for descriptions of Digi Specific commands for modem-emulation configurations Set pppoutbound Authmethod=nonePAPCHAPboth PapChap Both Defaultgateway=yesno Addressmask=ip address maskProtocolcompression=onoff Addresscompression=onoff Lcpkeepalive=onoff Lcpkaquiettime=10-86400 secondsAsyncmap=hex string 000A0000 N1-4=phonenumber Loginscript=chat script Ipcpdnsenabled=onoffDisplay pppstats command displays the current status of PPP Dialscript=chat script Or displays the current port-profile settings Port as a console to access the command line interfaceSet profile set profile Option’s description Localconfig Options Port=portProfile=profile Consolemanagement Tunneling TcpsocketsUdpsockets Set putty Displays current terminal-emulation settingsFor it to process Width=80132 Height=10-60Hostport=/com/0/com/1/vcom/0 Keyboardport=/com/0/com/1No Keyboard Cursortype=noneblockunderlinevertical BlockUnderline Blinkcursor=onoff Characterset=host charset Set putty Complete list of allowed character sets is Character Set name Description Key mapping terminal emulation options Deletekeymaprange=1-32 Keymaprange=1-32Inseq=00-FF Outseq=00-FF Emulation settings Would enterNow, to delete the first 2 entries One enter Set python Command=filenameOptions Range=1 Options State Options Keepalive=onoff Set realportExclusive=onoff Set service keepalive=onoff, or clients such as autoconnect Probecount, probeinterval, garbagebyte, and overridedhcp Set rtstoggle Predelay=delay Postdelay=delay Set serial Altpin=onoff Baudrate=bps Csize=5678Flowcontrol=hardwaresoftwarenone Hardware Options Range= range Set serviceIpport=network port Delayedack=0-1000 Base network port number + serial port number Service Services Provided Network Port Number Command Descriptions 195 Index numbers and changing default port numbers Device is configured for IP passthrough Service tableSet surelink on Setsenabled=onoff Options Trapdestip=ipaddressPubliccommunity=string Privatecommunity=string Logintrap=onoff Authfailtrap=onoffColdstarttrap=onoff Linkuptrap=onoff Configure a socket tunnel Display current socket tunnel settingsSet sockettunnel End initiated the tunnel Fromport=port number Toport=port number Connection-failure settings can be disabled as well Set surelink set surelinkPing Test TCP Connection Test Moduleresetconnectfailures=1-2550=off Systemresetconnectfailures=1-2550=offDisplay current SureLink settings Options for Hardware reset thresholds Test=pingtcpdns Ping Trigger=intervalidle DnsInterval Interval=10-65535 Ipport=1-65535Dnsfqdn1=dns fqdn Dnsfqdn2=dns fqdn Display pppstats command displays connection and activity Statistics on page 35 for descriptions of these statistics Set switches set switches Configure MEI settingsDisplay current MEI settings Used Wires=twofour Options Range=rangeMode=232485 232 Display on page 27. The display switches command displays Current switch settingsRevert on page 61. The revert switches command reverts Set switches configuration Set system Options Description=stringLocation=string Contact=string Serial settings This command affects the following TCP serial connectionsConnections made using the autoconnect feature For a user to display the TCP serial settings for any line Sidstring=socketid string Sendtime=01-65535ms Endpattern=stringStrippattern=onoff Revert on Show on Command line of the device Configure terminal settingsDisplay current terminal settings Set term Another service, the data will be sent to the serial port For a user to display the UDP serial settings for any lineConnect WAN and ConnectPort Display Are logged in set permissions s-udpserial=r-self Sendcount= bytes Port= rangeSendtime=0 time Clostime=time Sidstring=stringRange=1-64 UDP serial settings UDP port of the destination to which data is sentIdentifies the range of UDP destinations to be displayed Data to be sent on to the network destination Change user configuration attributes Display user configuration attributesFor a user to display user configuration attributes For a user to display and set user configuration attributes Maximum of 32 users can be defined AssociateTwo groups Disassociate Groupaccess=onoff User cannot use group access rights Default is offUser is not allowed to access the custom menu interface Gid=number Defaultaccess=nonecommandlinemenugroup Defaultgroup=nonegidgnameGroup Gid Tftphostfilename Publickey=tftphostfilenameclearTftphost Set video Splashtime=0-30 seconds Server=vnc server ipaddrdns name Password=vnc server passwordPort=vnc server network port Server services are enabled and disabled by the set service Configured globallyRemote Access VNC Client Settings VPN Settings and VPN Tunnel Settings Display current VPN settings Security associations SAs Set IKE/ISAKMP SA Phase 2 Options Set IKE/ISAKMP SA Phase 1 OptionsDisplay current VPN settings Identity=fqdnuser fqdnip address Dhgroup=125 Identity=ip-addressPfs=onoff Name=tunnel name Tunnel optionsNewname=tunnel name Remotevpnendpoint=fqdnip address Manually-keyed optionsMode=manually-keyed Inboundspi=256 Inboundauthentication=nonemd5sha1 Md5Sha1 Inboundauthkey=ascii keyhex key Outboundauthentication=nonemd5sha1 Inboundenckey=ascii keyhex keyOutboundspi=256 Outboundauthkey=ascii keyhex key Encryption Authentication SA Lifetime Isakmp optionsMode=isakmp Sharedkey=ascii keyhex key Set vpn phase1 Authentication=md5sha1Authmethod=sharedkeydssrsa Sharedkey Set vpn phase2 Salifetime=10-232Salifetimedata=0-232 Tunnel=1-2 Authentication=nonemd5sha1 Encryption=nonedes3desaesSalifetime=60-232 Salifetimedata=0 232 kilobytes Settings ConfiguringSet wlan Authentication methods and associated data fields PSK Configure wireless settings Inner and outer protocols Ssid=string Authentication= OpenWepauth Wpapsk Encryption=open,wep,tkip,ccmp,any WepTkip Ccmp Password=string GtcMschapv2 Otp Psk=string WepkeyN=hex string Issued to the device User permissions for commandsSettings... column to go to the command descriptions Show Show Command Descriptions 251 Display network configuration settings Configuration table entry or range of entriesDisplay settings for a particular user Command Descriptions 253 Session number Ip addr TelnetTcp port Connect Options StatusconnectdisconnectDisconnect This command enables the tunnel at index 1 to be used Set vpn on page 228. The set vpn command configures VPNThis command Connections Management page in the Web user interface from To set permissions who=execute to use this command. See Who whoDisplays active connections to and from the device None at this time What Is Modem Emulation? Modem Emulation Cable SignalsWhat Is Modem Emulation? Modes of Operation User Scenario Diagram a Common User Scenarios for Modem Emulation User Scenario Diagram B Connection Scenarios for Modem Emulation Outgoing Modem Emulation ConnectionIncoming Modem Emulation Connection Modem Emulation Pooling About the Commands in this Chapter Accepted But Ignored AT Commands Emulation configuration scenario Modem Emulation AT Command SetFunction Result Command Code Modem Emulation Commands 265 Command Function Result Register Function Range Units Default Register Definitions Register Function Range Units Default Result Codes Emulation commandsShort Long Form 270 Modem Emulation Commands D e ESP GRE PSK Self user permission 198 Snmp